This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31362e302f32342d3234203d3e20323731343834.roa
File: 3138312e3233332e31362e302f32342d3234203d3e20323731343834.roa (raw, json)
Hash identifier: vSqYbTq01swljf6Ox8yQz1sdyM7ph7wczq1Neu0GLEc=
Subject key identifier: 66:A8:0C:0B:6D:40:3D:30:D7:9C:A4:7E:D2:6C:04:31:4A:53:B7:94
Certificate issuer: /CN=9A6E50814BF73B4D0E4AD8A5C63662DE4A00A82B
Certificate serial: 62A8FD4D3BEC2526349F3A25D3A2606A62A670DB
Authority key identifier: 9A:6E:50:81:4B:F7:3B:4D:0E:4A:D8:A5:C6:36:62:DE:4A:00:A8:2B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A6E50814BF73B4D0E4AD8A5C63662DE4A00A82B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31362e302f32342d3234203d3e20323731343834.roa
Signing time: Tue 13 Jan 2026 20:20:59 +0000
ROA not before: Tue 13 Jan 2026 20:15:59 +0000
ROA not after: Tue 12 Jan 2027 20:20:59 +0000
asID: 271484
IP address blocks: 181.233.16.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:a8:fd:4d:3b:ec:25:26:34:9f:3a:25:d3:a2:60:6a:62:a6:70:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A6E50814BF73B4D0E4AD8A5C63662DE4A00A82B
Validity
Not Before: Jan 13 20:15:59 2026 GMT
Not After : Jan 12 20:20:59 2027 GMT
Subject: CN=66A80C0B6D403D30D79CA47ED26C04314A53B794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:83:77:9f:44:e8:d3:0c:6d:e4:d5:25:c0:d9:
fd:e9:23:c5:a8:31:94:93:da:15:73:76:52:91:c5:
37:c2:ed:51:7d:3d:a8:88:27:5e:87:6d:d1:de:2f:
24:49:31:e6:d8:f7:e3:26:fd:b4:54:e3:1b:5f:b3:
93:8e:5d:9c:1e:f5:cc:0c:f1:ef:3e:9d:14:8d:d3:
d3:08:96:71:b9:1f:f2:70:27:31:56:09:aa:68:22:
d5:f8:a9:de:50:4b:6c:da:15:57:54:46:4f:25:1b:
dd:2c:54:9e:42:45:f6:40:3e:95:c5:cc:d8:41:05:
a0:8d:8a:b3:b9:d2:21:3e:a5:9d:66:ad:00:19:a4:
82:9a:14:74:c2:38:68:72:de:42:49:65:e8:c5:ce:
c4:f0:74:58:9a:2d:00:3f:8f:b5:34:e0:b0:43:9e:
29:f2:b3:49:ac:5b:c6:96:fe:b0:7e:57:7b:c4:36:
81:25:2b:9a:0f:12:27:31:81:88:f9:19:e6:84:4f:
40:8a:c3:b8:af:e3:0a:e4:ca:09:ba:09:56:57:2a:
76:7a:e3:e2:5b:bf:11:f9:88:e8:95:d7:98:1b:89:
c4:f3:a8:a0:a9:7b:34:ab:a5:ee:24:43:f9:d5:05:
cc:af:0c:0f:b0:2b:c7:b2:7f:ca:a6:34:00:c1:32:
1d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A8:0C:0B:6D:40:3D:30:D7:9C:A4:7E:D2:6C:04:31:4A:53:B7:94
X509v3 Authority Key Identifier:
keyid:9A:6E:50:81:4B:F7:3B:4D:0E:4A:D8:A5:C6:36:62:DE:4A:00:A8:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/9A6E50814BF73B4D0E4AD8A5C63662DE4A00A82B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A6E50814BF73B4D0E4AD8A5C63662DE4A00A82B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31362e302f32342d3234203d3e20323731343834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.233.16.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:6d:df:17:c7:e8:62:f5:22:a0:3f:36:d1:50:dc:ba:88:41:
70:42:be:50:c2:73:ff:54:42:90:87:e9:52:15:1e:cc:f4:5c:
54:67:99:53:60:f8:be:6d:c3:68:3c:16:96:77:95:96:8e:6a:
21:07:96:49:6a:9a:9d:15:31:6a:f5:cd:bb:5c:d9:26:65:61:
0d:22:e1:90:0f:f0:c9:05:06:27:b5:4a:ba:60:c4:ab:61:9e:
06:f6:8a:78:92:f9:b6:09:81:e9:2e:c7:94:49:74:01:ef:96:
c0:0c:a0:a6:9c:94:c1:1f:71:c4:34:6a:0f:85:d1:e8:6a:ac:
80:50:3f:25:a6:d9:f7:88:3f:db:24:29:88:9a:7d:35:23:e3:
40:b4:62:d7:d3:ab:fd:65:59:83:0a:83:84:15:96:6e:10:fe:
1a:ec:4f:03:68:91:fd:80:5d:82:49:94:79:c9:c6:61:9a:0d:
72:24:db:7c:0b:74:f3:de:f5:1b:c9:fc:43:4a:da:3c:d1:cb:
6f:e4:fe:08:91:f2:ac:bc:b5:1d:11:df:48:8f:4e:64:2d:1c:
39:bf:b9:ae:61:43:b4:bc:62:50:4e:ee:f3:76:e8:e1:28:9c:
f6:7a:f4:e9:2e:1b:5e:63:6f:07:bd:da:80:e2:5b:d3:43:8b:
94:e2:5b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:02:26 2026 by rpki-client